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COMMUNICATIONS SYSTEM 

r 

nie present invention relates to the field of conmnmications systons in general and to syst^is 
for protecting against the effects of equit>mait Mure in communications systcans in 
particular. 

One of file most in^rtant concspts in network management is maintainiAg flie survivability 

of networks. When there are either link or node feflures any affected routes should be repaired 
as soon as possible. A node &ilure can be considoed as flie &ilure of multiple links, that is, a 
node feilure affects flie traffic the same way as if all links terminated on it were faulty. The 
present invention applies to both link and node diversity protection schemes: here diveisity 
relates to flie property of the resources used by the protection path (links and'br nodes) to be 
fully disjoint from those used by the workiDg path. 

Because of the large volumes of tiaffic Aat n^woiks are expected to cany, resulting fiom the 
continued explore growth of data-oriented applications, network survivability has become 
an issue of paramount importance. In conjunction, there is a continumg drive for maxhnising 
efficiency and minimising costs in large networks. Nodes are able to monitor the status of the 
connections passing through them to detect feults. hi the SDH transport network, for 
example, this can be achieved usmg both traU monitoring and the so-caUed non-intnisive 
monitoring, botii defined m the UU-T specification G.783. 

Traditional protection schones, mainly used m ring networks, consume large amounts of 
bandwidth. Shared protection (where resources are shared between a number of protection 
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paths) on mesh networks requires less additional capacity to provide feult protection than on 
ring networks. Allhougjx shared protection mesh networks consume fewer netwoik resources, 
the tiade-oflf has been in longer service restoration times. There is therefore a need for an 
appropriate architecture to enable fast restoration in such networks. 

■ 

5 Ihe present invention provides a data communications system conq)rising a plurality of nodes 

t 

and a plurality of links for providing connections between the nodes; in which a subset of &e 
links and nodes fiam a woricer path for carrying woricer data through the communication 
system; in which the systan comprises a further subset of links and nodes fiw forming a 
plurality of protection paths for carrying non-worker data in the absence of a &ult in the 
10 worker path and each for providing an alternative pafli for the worker data in a different part of 
the woriser path in the event of a feult in fte worker path; in which the system comprises 
protection means, in which the alternative paflis are predeteraiined by the protection 
prior to the detection of a feult in the worker pafli; in which the protection means is airanged 
to activate the entire plurality of protection paths to cany the worker data upon detection of a 
1 5 &ult in the worker path; in which the protection means is arranged to identify the location of 
the feult, to return the worker data to those parts of the worker path not affected by flie feult 
and to d^«ctivate any of the protection paths providing an alternative to those parts 6f the 
worker not affected by the &ult 



means 



20 



According to a preferred anbodimenli the system comprises means for allocating the links 
and nodes one or more cost values relative to the links and nodes of the worker path and 
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means for selecting on the basis of the one or more cost values a further subset of flie nodes 
and links to fonn a ^tection palfa for at least one Khk or node of the worker path 

The presoit inventirai also provides a mediod of jrotectii^ a worker path in a data 
communications system comprising a plurality of nodes and a plurality of links for providing 
5 connections between Ae nodes; including fee steps of passing worfcer date through a subset of 
the links and nodes making up the worker path and designating a further subset of Imks and 
nodes to fonn a plurahty of protection paths; in which the protection paths cany no worioer 
data in fee absence of a feult in fee woiker pafe and in which each provides an alternative pafe 

4 

for fee woiker data m a different part of fee woifcer pafe in fee event of a feult in fee woricer 
1 0 path; including fee steps of detecting a feult in fee woiker pafe and activating fee entire 
plurality of protection paths to cany fee worker data vtpoa detection of a feult in fee woiko: 
pafe; including fee steps of identi]fying fee location of fee fault and returning fee woiker data 
to feose parts of fee wote pafe not affected by fee fault and de-activating any of fee 
protection paths that are providing an alternative for feose parts of the worfcer pafe not affected 
15 by fee feult 

Accordmg to a piefened embodhnent, fee present invention also provides a mefeod including 
fee stq>s of allocating fee links and nodes one or more cost values relative to fee links and 
nodes of fee wodcer pafe and selecting on fee basis of the one ormoie cost values a further 
subset of fee nodes and links to fonn a protection pafe for at least one link or node of fee 
20 worker path.. 
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Embodiments of the invention will now be described by way of example with reference to the 
drawings in which 

5 

Figures 1 to 3 show conventional operation with protection switching inside a transport 
network element (TNE); 

Figures 4 to 7 show a network of TNEs illustrating various protection mechanisms according 
10 to the present invention; 

Figures 8 and 9 show various aspects of communications systems to which the present 
invention may be applied. 

1 5 The invention will be explained by way of example with reference to SONET/SDH transport 
networks due to the great popularity of this kind of network, however the present invention is 
not limited to such networks. In conventional SONET/SDH networks, one can recover from a 
faulty link or node in 50 ms or less, but achievement of this depends on optical network links 
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having a 1+1 backup, i.e. with one backup link allocated for every worker link. To avoid this 
waste of resources, the present invention provides a shared restoration mechanism that 
provides enhanced network survivability while minimising the network resources consumed. 



5 The following table summarises four possible protection schemes with respect to path 
calculation (i,e. calculation of the sequence of hnks and nodes to be traversed), resource 
selection (i.e. selection of the channels to be used within the links) and resource allocation (i.e. 
the actual implementation of cross connections in the nodes, and consequent seizure of the 
channels in the links). 



Protection 
Scheme Type 


Path Calculation 


Resource Selection 


Resource Allocation 


1 


After Failure 


After Failure 


After Failure 


2 


Before Failure 


After Failure 


After Failure 


3 


Before Failure 


Before Failure 


After Failure 


4 


Before Failure 


Before Failure 


Before Failure 



10 

The present invention relates to protection scheme type three of the table while conventional 
SDH protection (APS or Automatic Protection Switching) is type four. 
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Type three resources are only used after a fault occurs. The same resource can be allocated to 
several restoration paths, provided that these restoration paths are never activated 
simultaneously by a single fault. Sharing resources between different restoration paths in this 
way is the definition of "shared restoration" for this invention. 

5 

SNCP Operations in a transport network element (TNE) 

The cross-connection mechanism needed in a node in order to switch, in a non traffic-affecting 
way, between the worker and protection path and vice-versa will now be illustrated, with 
reference to Figures 1 to 3. As stated above, we adopt, by way of example, the SDH 
10 nomenclature, but the same conceptual mechanism can be used in all transport netwoilc 
architectures. 



Figure 1 illustrates how a single sub-network connection protection (SNCP) protection 
scheme is implemented, as defined in ITU-T rec. G.80S sec. 7.2.2. Worker ports A and B 

15 exchan^ data via the switch matrix of the TNE. Protection port C is protecting worker port B: 
if a failure occurs affecting port B, the pre-planned protection starts using port C. Protection 
uses a split function and a select function within die TNE. The selection module (Sel.) selects 
the best signal between the two it receives (i.e. one from each of ports B and C) and sends the 
selected signal to port A via the matrix. The split module splits the signal it receives from port 

20 A via the matrix into two signals one sent to each of ports B and C. Worker port A has no 
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corresponding protection port a failure affecting part A will adversely affect communications. 
The relevant information, relating to both the worker (W) and the protection (P) paths, needed 
in order to perform protection switching, should the need arise is stored in a protection table. 
The table may be provided in any implementation of a control unit for the TNE. 

5 

Figure 2, shows a TNE similar to that of Rgure 1, with the addition of protection port D. 

According to Hgure 2, worker port A is protected by a SNCP, via protection port D while 

worker port B is protected by a SNCP via protection port C. An additional selection function 

(Sel.) selects the best signal between the two it receives from ports A and D and sends it to the 
10 '*B side'' split function via the matrix. An additional split function splits the signal it receives 

from the "B side" select function via the matrix in two, sending one to each of ports A and D. 

This behaviour assures that, in case of a failure of one or more resources of the worker path, 

the traffic is correcdy transported by corresponding resources of the protection path. 

Moreover, it is possible, when the worker path becomes available again, to disable the 
15 protection path and revert to the work^ path without adversely affecting the transported 

traffic. A protection table contains the relevant information needed in order to perform 

protection switching for either port A or B, should the need arise. 



20 



Figure 3 depicts how a TNE works in the absence of failures* The TNE of Figure 3 has two 
worker ports (A, B) and two protection ports (D, C). As the figure shows, during normal 
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operation no protection scheme is implemented Worker traffic passes bi-diiectionally 
between worker ports A and B via a switch matrix internal to the TNE. A protection table 
contains the relevant information needed in order to perform protection switching, should the 
need arise. Activation of the protection table will cause implementation of a double protection 
scheme as shown in figure 2. 

A typical communications network comprises one or more worker paths that cross a set of 
resources in the network, namely nodes (e.g. TNEs) and links. If only faults occurring among 
links are considered, the protection is defined as '"protection widi link diversity". If faulty 
nodes are considered in addition to links, die protection is defined as "protection with node 
diversity". 

According to the present invention, a preplanned local repair scheme may be configured, 
activated and deactivated according to the following sequence: 

1. when the worker path is configured, a set of detours is also computed whose union can 
bypass all the resources (with either link or node diversity) in the worker path. For shared 
restoration, details of alternative paths ( i.e. the links and nodes used for the detours) are 
stored for possible future use in the event of a failure but not implemented immediately. 
Detours must be selected with specific criteria to allow efficient sharing of the protection 
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resources: see "Selecting and Configuring Detours", below. The alternative paths are not 
used for carrying the worker data unless a fault has been detected in the worker path. 

2. When a failure occurs, locating exactly which rcsource(s) (link or node) is faulty in the 
5 worker path may take a long time, but the source and destination nodes and, possibly, a 
set of intemiediate nodes can very quickly detect that the worker path is faulty 
somewhere: see "Designating Monitoring Points", below. 



3. As the presence of a fault is detected but not located, all the detours are activated at once 
10 using SNCP to simultaneously activate multiple detours: see "Activating Detours", below. 

This achieves the necessary protection in the shortest recovery time. 

4. Later, when the fault is fully located by the nodes, only the detour tiiat actually bypasses 
the faulty resource is left in place: see "Selecting die Protecting Detours", below. If two 

1 5 detours protect die same faulty resource they are both activated, and it is simplest to allow 
diem to remain activated until the fault is fixed, although, one could be deactivated. 

5. All the other detours are released, i.e. a hidess partial deactivate is performed: see 
"Reactivating die Unused Detours" below. 

20 
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6. When the fault is repaired, the last detour is also released. 
Seiectiiig and Configuring Detours 

When a path with pre-planned protection is requested, a worker patii and a set of protection 
5 detours are computed. The worker path may typically be computed by means of a shortest 
path algorithm according to conventional techniques. 

For each resource Oink or node) forming part of the worker path, there must exist at least one 
detour to accommodate a fault on that resource. Each detour will preferably use as few 
1 0 resources as possible. 

As indicated above, it may happen that two detours protect the same resource. Hiis is 
unavoidable if node diversity is required, because, if two adjacent nodes are protected by 
different detours, then the link between them will be protected by both these detours. This is 

15 illustrated in Rguie 4. According to the embodiment of Figure 4, the worko" path extends 
from source node S to destination node D through nodes 2, 3 and 4. The network of Figure 4 
also has three detour paths: detour 10 extends between nodes S, 6 and 3; detour 12 extends 
between nodes 2, 7 and 4 and detour 14 extends between nodes 3, 8 and D. Source node S and 
destination node D perform trail monitoring. For example nodes 2 and 3 on the worker path 

20 are protected by separate detours. (Node 2 is protected by detour 10 and node 3 by detour 12. 
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As a result, the link between nodes 2 and 3 is protected by both detours 10 and 12). It will be 
noted that the three detours (10, 12 and 14) of Rgure 4 provide a number of disjoint (i.e. not 
directly connected) alternatives to the worker path. However, for simplicity, such a 
combination of detours will be referred to here as a single alternative path. This is valid as it is 
5 only the combination of aU these detours that-offer protection for every resource of the worker 
path. 

Two kinds of nodes take part in a detour: nodes that terminate the detour (TD), (i.e. those that 
are also crossed by the worker path), and nodes that are intermediate in the detour (ID). An ID 
10 node stores information defining the cross-connection required for the detour without 
implementing it unless a fault is detected in a resource of the worker path protected by that ID 
node, as described below. The ID node may also associate a unique path identifier with the 
cross-connection definition, in order to allow it to be identified when activation of the detour is 
requested (see below). 

15 

In normal, fault-free operation, a TD node implements the 'Nvorker** cross-connection that 
forms part of the worker path. The TD node stores information defining a *'detour*' cross- 
connection i.e. a "fork" in the path that would transfer traffic from the worker path to the 
detour, i,e. the protection path. 



20 
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Designating Monitoring Points 

The speed at which detours are activated is improved according to a preferred embodiment by 
sending the ActivateDetour message from both the beginning and end of each detour rather 
dian from just one ^d (the ActivateDetour message contains the unique path identifier for the 

5 cross-connection definition). This reduces the time required for signaling to the propagation 
delay across half of the longest detour. The signaling will start at a monitoring TD node when 
that node detects a failure in the worker circuit For these reasons, placing non-intrusive 
monitoring fiinctioiis at all TD nodes is recommended. Examples are given in the drawings 
where Figure S shows an example in which not all nodes in the worker path implement 

1 0 monitoring points (i.e. only nodes 4 and 7, see below) and Hgure 6 shows an example in 
which all nodes in the worker path implement monitoring points 



According to the embodiment of Figure 5, the worker path extends from source node S to 
destination node D through nodes 2, 4, S, 7 and 8. Hie network of Figure 5 also has three 

1 5 detour paths that extend, respectively between nodes S, 3 and 4; 4, 6 and 7 and 7, 9 and D. 
Source node S and destination node D perform trail monitoring. Only nodes 4 and 7 perform 
non-intrusive monitoring. According to the embodiment of Figure 6, the worker path extends 
from source node S to destination node D through nodes S, 2, 3, 4, and D . The network of 
Figure 6 also has three detour paths that extend, respectively between nodes S, 6 and 3; 2, 7 

20 and 4; and 3, 8 and D. Source node S and destination node D perform trail monitoring. Nodes 
2, 3 and 4 perform non-intrusive monitoring 



wo 2004/036800 



13 



PCT/1B2003/005516 



Activating Detours 

When the (TD) nodes implementing monitoring detect a worker path failure, they all send an 
ActivateDetour message through the detour paths. The ActivateDetour message contains a 
unique path identifier to inform the ID nodes which detour connections must be activated. The 
ActivateDetour message actually identifies to the ID nodes which parts of the detour path to 
activate (i.e. by use of the unique path identifier for die cross-connection definition referred to 
above under "Selecting and Configuring Detours"). We may think of a working path and all 
its associated detours as a single object with a unique identifier, if any node receives an 
ActivateDetour message with a certain identifier, it activates the connections implementing 
the detours associated the that identifier. This includes the TD nodes implementing the 
appropriate detour cross-connections (SNCP forks). 

The ID nodes, in turn, propagate a received ActivateDetour message unless tiiey have already 
received it, (i.e. form the TD node at the other end of the detour connection) and implement 
the previously defined cross-connection corresponding to the unique path identifier in the 
message. 

If a node is trying to propagate an ActivateDetour message to a faulty resource (i.e., a link 
identified as faulty by a disabling alarm: a faulty node is perceived as a faulty link by its 
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nei^bouring node), the cross-connection through the node leading to the faulty resource is 
deleted locally and autonomously by the node itself and a DeieteDetour message is generated 
by the node to recover diat unusable detour (see "De-activate the unused detours", below). 



5 Selecting the Protecting Detours 

A single fault on a specific resource will be protected by one or more detours. It is possible 
that further detours are present in die network that are not protecting the faulty resource and 
can therefore be released, i.e. all the detours are implemented at first and then some de- 
activated. When the faulty resource is identified and its location determined (e.g. by node 
10 diagnostics), it is possible to identify which detours are protecting the faulty resource and 
which ones not. The latter can then be released to allow them to carry other traffic and to 
protect other faults, if any, thus enhancing network resilience. This can be viewed as an early 
partial-deactivate: i.e. the de-activation of some detours before the fault is repaired. 

1 5 The identification of non-protecting detours will now be described with reference to Figure 7. 
Figure 7 shows a network with overlapping detours similar to that of Figure 6. According to 
the embodiment of Figure 7, the worker path extends fi'om source node S to destination node 
D tiirough nodes 2, 3, 4 and S. The network of figure 7 also has three detour paths that 
extend, respectively between nodes S, 8 and 3; 2. 7 and 5; and 3. 9 and D. The network of 

20 Figure 7 has a faulty resource (see spike symbol) i.e. the link between TD nodes 3 and 4 on 
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the worker path. The two detour paths crossing nodes 7 and 9 are both protecting the faulty 
resource, while the detour crossing nodes 8 is not and can therefore be released. To locate the 
non-protecting detours the following algorithm is used: 

5 - (1) indicate with <L and L> the nodes where the alarm of the faulty resource has been 
detected as follows: indicate nodes where a fault has been detected towards the destination 
with <L and nodes where a fault has been detected towards the source of the worker path 
widi L>. <L and L> may be thought of as status fields within the nodes. 

10 - (2) indicate with <P nodes where a detour begins in the direction of the destination. 
Indicate with P> nodes where a detour begins in the direction of the source (<P and P> are 
only present in TD nodes). <P and P> may also be thought of as status fields within the 
nodes. <P, P>, <L and L> are not mutually exclusive: see figure 7. 

1 5 Hence, in the embodiment of Figure 7, the TD nodes have the following status: 

S = <P; 4 = L>; 

2 = <P; 5 = P>; 

3 = <P P> <L; D = P>. 
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According to the embodiment of Fig. 7, only nodes 3&4 detect the fault, although in practice 
more of the TD nodes could do this. 

- (3) nodes with <L send a RevertSource message along the worker path in the direction 
away from the faulty resource, i.e. towards the source node. 

- (4) if a node with a <P receives die RevertSource message, the message is propagated 
along the worker path and no action is taken. It is possible for the same node to be 
indicated with both <P and <L. If so, the algorithm works as if thwe were a message 
passed between a first node with <L and a second node with <P, although, in practice, 
there is no need of a message 

- (5) if a node indicated by a P> receives the RevertSource message, the message is 
propagated along the worker path and the detour is recovered as described below. It is 
possible for the same node to be indicated with both P> and <L. If so, the algorithm acts as 
if a message is passed from <L to P> in a similar way to the case described at step (3), 
above for <P and <L, 



wo 2004/036800 



PCT/IB2003/005516 



17 

- (6) the node with L> sends a ReveitDestination message along the worker path in the 
direction away from the faulty resource, i.e. towards the Destination node. 

- (7) if a node indicated by P> receives the RevertDestination message, the message is 
propagated along the worker path and no action is taken. It is possible for the same node 
to be indicated with both P> and L>. If so, the algorithm acts as if a message is passed 
from L> to P> in a similar way to the case described at step (3), above for <P and <L, 

(8) if a node indicated by <P receives the RevertDestination message, die message is 
propagated along the worker path and the detour is recovered as described below. It is 
possible for the same node to be indicated with both <P and L>. If so, the algorithm acts as if a 
message is passed from L> to <P in a similar way to the case described at step (3), above for 
<P and <L. 

Turning to the embodiment of Figure 7, a RevertDestination message is sent from node 4 
(L>)and propagated through node 5 (P>) to destination node D (P>): nothing is done, because 
the message crosses only nodes with R> representing protecting detours. 

Simultaneously, in Figure 7, a RevertSource message is sent from node 3 (<P, P> and <L) and 
propagated through node 2 (<P) to source node S (<P). When the indications <P are 
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encountered in node 3 and then in nodes 2 and S, nothing happens. When the indication P> is 
encountered in node 3, the detour via node 8 is deactivated and the resources recovered. 



Deactivating the Unused Detours 

5 De-activation of an unused detour is always initiated in a TD node. The worker signal on the 
detour is forced onto the worker path, then a DeleteDetour message is sent along the detour 
path from the TD node initiating detour deactivation and all the detour cross-connections are 
deleted. Information relating to the detour cross-connection in TD and ID nodes continues to 
be maintained, together with its associated path identifier, for further use in the event of future 

10 faults. 

The process of selecting the protection path will now be described by way of example with 
reference to Figures 8 and 9 and using the following notation and definitions. 

15 Notation: 

3 : existential quantifier that reads "there exists". 

{a, b, c} the set containing a, b and c; 

E set membership; 

£ subset; 
20 u union; 
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I 

n intersection; 

negation; 
0 empty set 

5 Definitions: 

Let the network be described by a graph G = {N,E, c/, where 
N = {... Hi, ... } is the set of nodes, 

E ^NxN is the set of links, where each link provides a connection between two nodes of the 
set N. It is the resource that gives bandwidth between two adjacent nodes and is identified by 
10 those two nodes; 

c: E-^9i is the cost function 

where 91 : the field of the real numbers. The cost c is a function that maps links into real 
numbers; several cost values may be assigned to a link, all expressible with a real number, the 
main values include financial cost, total capacity, used capacity and remaining capacity; here 
15 we use also two auxiliary modified cost functions. In other cases to which the present 
invention has application (for example in all optical networks), you may need a very complex 
cost function expressing physical fiber parameters and optical signal quality. For the purposes 
of the present example embodiment, we assume a simple real cost. 

20 ef is a faulty link; 
nf is a faulty node 
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A path wp on the network is described by a sequence of nodes and their con^sponding links 
wp = [ni, ej, n2y €2, ... rtk^h ^k-h ^kl provided link €i connects nodes ni and /li+i, i.e. it satisfies 
the property Ci = (m, fii^i). We will call /t/ the source of wp and tik its destination. 

Given a path wp and a resource (link ej or node «/) on the path diat it is desired to protect with 
5 a protection path or detour, we define two more cost functions cl and cn as follows: 



cl(wp,ey..^J = 



«>if f -i 

Oii f and G wp 
c(e,. ) otherwise 



The cost cl associated with each faulty link (cf) is infinite (i.e. never use). The cost associated 
with a working link on the path (w^)) is zero (i.e. always use). Otherwise, the cost is given by 
the ftinction c. 



10 



cn(wp,nyr,ej = 



«>if 3n, such that = {n^,n^)or = (n^.rij) 

0 if (-i3n, such that = (n^ , ) or = (n, , iij )) and G wp 

c(e^ ) otherwise 



15 



The cost cn associated with each faulty node (nf) is infinite (i.e. never use). The cost associated 
with a working node on the path (wp) is zero (i.e. always use). Otherwise, the cost is given by 
the function c. The cost fiinction c is part of the definition of the input network and is taken as 
predetermined, e.g. on network initialization. 



These two cost functions (cl, cn) are used to find a minimum-cost detour protecting a potential 
faulty resource (cf) or (nf) of a path wp. Cost function cl allocates cost «> to link e/ to prevent its 
use as a detour for itself. Cost function cl allocates cost 0 to links in wp that are already 
20 configured to ensure that these are always selected, where available. Cost function cn allocates 
costs relating to node nr in a similar way. 
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These cost functions operate to favour locality, i.e. resources closest to the resource to be 
protected. In this way the length of the detour, the amount of resources used and the time 
taken for implementing the detour are all minimized. 

5 

The concept of Shared Risk Link Group (SRLG) will now be discussed with reference to the 
drawings in which Figure 1 shows a path passing through a number of resources. A SRLG 
indicates a pool of resources that share the same failure risk e.g. the fiber that share the same 
duct, links that share the same node will belong to the same SRLG. 

10 A link can belong to more than one SRLG. In figure 1, for example, the two ducts define two 
SRLGs and die fiber panel defines another SRLG, thus the link from A to B belongs to three 
SRLGs. 

The following naming conventions are used here. 

A path between two points A and B will be indicated by AB. 

15 A contiguous subset of resources in AB is called a segment of AB and is indicated with an 
index (e.g., ABi, ABj, ABO* 

If e is a link, we will write SRLGCe) for the set of SRLGs that e belongs to. 

If path wp=[ni, €i, n2, €2, ... ek-i, ^kl » we will write SRLG(Hy) for u,- SRLG(ei). 

A link interferes with another if the two links belong in the same SRLG. 

20 If; is an SRLG and geSRLGi wp), its elements are links. 

We will call closure of a path wp (more in general, closure of a link set) widi respect to 
interference of the set of links IntClos(wp) = ut gi for all gi€SRLG(wp) 



■ 
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Figure 2 illustrates by way of example the concept of closure of a link set with respect to 
interference. With respect to figure 2 we can assert the following statements: 

AB and CD belong to SRLG2; 
SRLG(AB)= {SRLGl. SRGL2}; 
5 SRLG({CD, EF})= SRLG(CD) u SRLG(EF) = {SRLG2, SRLG3. SRLG4}; 
AB interferes with GH and CD; 
IntClos({CD. EF}) = {AB, CD, EF, U). 



10 When a padi with protection is requested from A to B a working path AB and a set of 
protection detours di(AB),... dk(AB) should be computed. 

By definition, a detour di(AB) protects a segment ABj of the working path. 

The working path is typically computed by means of a shortest path algorithm. The protection 
detours should satisfy the following properties: 

15 For each considered resource Gink or node) supporting the working path, there should exist at 
least one detour restoring a fault on that resource: u,- ABj = AB. This means that the 
combination of all detours will provide a complete alternative path between A and B. 
Advantageously, each detour should use as few resources as possible to allow maximum 
resource recovery. By setting cost to 0 for the already used resources and to oo for the faulty 

20 resource, the detour is encouraged to follow AB as closely as possible and to deviate only 
fi-om the faulty resources. This is achieved by applying a minimal cost algorithm to these 
costs. 
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The allowed resources for detour implementation are: 

♦ the free (unused) resources 

• the resources already used for detours of other working paths, provided that the 
segments protected by the two detours have no common point of failure: that is, for 
di(AB) some resources already used for dj(XY) if ABi and XYj have no common point 
of failure. 

The algorithm guarantees the following: 

SRLG(AB) n SRLG( di(AB) ) = 0, for each detour di(AB) 

Otherwise, a single failure could affect working and protection simultaneously. 

If SRLG(ABi) n SRIjG(XYj) 0, di(AB) and dj(XY) use disjoint resource sets and can 
therefore be implemented simultaneously. 

This is necessary as, if SRLG(ABi) n SRLG(XYj) 0, there exist at least one resource whose 
failure would affect simultaneously the segments ABj and XYj, thus, for effective restoration, 
it should be possible to allocate simultaneously di(AB) and dj(XY). 

Two routes or segments, detours or whatever set of resources are in link diversity if they are 
not supported by the same link or links, that is there is no single link fault that could 
simultaneously puts the two sets of resources out of order. 



9 



WO 2004/036800 PCT/IB 20 03/0055 16 

24 

The investigation of resources for protection is done iterating on all links of a path, i.e. 
considering one link at a time and investigating how best to protect a fault on it. 

5 iNrr 

Compute A5= [A=nj, eu nz €2, »- m-h et.i, B^rtkl on the free resources in E using cost 
function c with the algorithm of choice 

Initialize the detour set DS = 0 
10 Initialize the iterating faulty link ft = ej 
Seti^l 

Set all resources used by some working path "busy" and all resource used by detours "free" 
ITERATION 

15 Compute AB' on the free resources in E using cost function cl(AB, fl); where AB' is another 
path from A to B that follows a different route from path AB, 

SetABi^AB-(ABnAB') 
Set diAB) =AB'-(AB nAB') 
20 Find IntClos(ABi) 



V 
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Find all d/XY) such that XYj uses some link in IntClos(ABi) 
If there are free resources in d^AB) not used by any d/XY), then 
Insert d^AB) in DS 

If the B side ofAB nAB* includes only node B, terminate 
5 Set ft to the first link on the B side ofAB nAB' 
Set again all resources used by detours "free" 
Increment i 
Continue iteration 
Else 

1 0 Set resources used by any d/XY) "busy" ( temporarily for this iteration) 
Continue iteration 



We now consider the algorithm for the protection path calculation with node diversity. 

1 5 Two routes or segments, detours or whatever set of resources are in node diversity if they are 
not supported by the same node, that is there is no single node fault that could simultaneously 
put the two sets of resources out of order. 



INIT 



I 
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DP 

Compute AB- [A=ni, ei, n2, €2, ^m, fi=njj on the free resources in E using cost 

function c with the algorithm of choice 

Initialize the detour set DS = 0 
Initialize the iterating faulty nodejh = n2 
5 Seti = l 

Set all resources used by some wofldng path "busy" and all resource used by detours "free" 
ITERATION 

Compute AB ' on the free resources in E using cost function cn(AB,Jh) 
10 SetABi = AB-(AB nAB') 
Set d(AB) = AS'- fAfi nAB') 
Find IntClos(ABi) 

Find all d/XY) such that XYj uses some link in IntClos(ABi) 
If there are free resources in d^AB) not used by any d/XY), then 
15 Insert d^AB) in DS 

Set fit to the first node on the B side ofAB n AB ' 
Iffr = B, terminate 

Set again all resources used by detours "free" 
Increment i 
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Continue iteration 
Else 

Set resources used by any d/XY) "busy" (temporarily for this iteration) 
Continue iteration 

5 

The invention has been explained above by way of example mainly with reference to SDH 
Transport Networks due to the great popularity of this kind of network. However, it will be 
apparent to the skilled reader that the invention can be applied to all forms of transport 
1 0 network and to all topologies including, but not limited to, mesh and ring topologies. 

The above-described embodiments are presented by way of example only and are not intended 
to limit the scope of the invention. The present invention advantageously provides a means 
and method for fast switching to a pre-determined protection path and a routing algorithm, 
1 5 method and means suitable for computing the detours for a protection path in a shared local 
repair scheme as well as other forms of data communications systems. This algorithm takes 
into account interference of working paths to allow repair of multiple services against failure 
of multiple resources in shared risk group. It also considers maximization of locality to allow 
the use of the minimum amount of resources during a fault and to speed up detour activation. 
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